One chat for Salesforce and MuleSoft. The Copilot reads your systems and, with your approval, changes them.
Invitation-only betaAlready invited? Sign in
A teammate who can open every system you connect, and never changes anything without asking you first.
Why does the order-sync flow call the warehouse API twice?
The retry policy does not reuse the idempotency key, so the second call looks like a new order. I can draft the fix for the DataWeave mapping.
Answers come from the systems themselves: objects, flows and Apex in your org, APIs and applications in Anypoint, issues and pull requests in your repositories. Each connection acts as you, so the Copilot only sees what you can see.
Read how the Copilot readsA change becomes an approval card that shows the exact change and where it lands: which org, which workspace, which repository. Approve and the brain checks your mode again, then applies it. Deny and nothing is written.
Read about approval cardsYour Workstation is a private machine in the cloud where the Copilot builds and tests code. It sleeps when you are not chatting, shows its state on one page, and stops by itself when your monthly hours run out.
Read about the WorkstationThe rules are enforced on the server, not only on screen.
A new account starts in Sandbox. In Sandbox the Copilot is not offered any write tool. This is Cockpit declining to write; it is not a read-only credential at the provider.
Every write waits on a card that names exactly where it lands.
The access Cockpit holds for your tools is stored encrypted. Disconnecting a tool deletes Cockpit's copy, and for Salesforce, Slack and GitHub also revokes the grant at the provider.
Anthropic is the only AI provider. The Copilot runs on Claude.
What the Copilot reads from Slack, GitHub, Postman and Anypoint is marked as data, not as instructions from you.
Delete your account in the app, and your data and your stored connections go with it.
Every part of Cockpit has a call sign. Each card says what that part does and what it is not allowed to do.
Call sign: Muse
Reads the systems you connected and drafts the change.
Cannot: write anything without an approval card.
Call sign: Skipper
The admin. Invites the Crew and chooses who may use which connector.
Cannot: read a member's chats.
Crew member
Leads the integration design and approves their own writes.
Cannot: approve anyone else's change.
Crew member
Builds in a sandbox first and ships when the card says yes.
Cannot: write anywhere while in Sandbox mode.
Cockpit is invitation-only while we grow. Join the waitlist and the founder will write to you personally.